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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 
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DETAILED ACTION 
Response to Amendment 

1 . This office action is in response to request for reconsideration filed on March 22, 
2004 (Paper No. 10). Declaration filed on March 22, 2004 (Paper No. 9) have been 
entered and made of record. Therefore, currently pending Claims are 1-26. 

2. The declaration filed on March 22, 2004 (Paper No. 9) under 37 CFR 1 . 1 3 1 has 
been considered but is ineffective to overcome the Harrison et al., (U. S. Patent No. 
6,330,560) reference. 

3. The evidence submitted is insufficient to establish a conception of the invention 
prior to the effective date (September 10, 1999) of the Harrison et al. reference. While 
conception is the mental part of the inventive act, it must be capable of proof, such as by 
demonstrative evidence or by a complete disclosure to another. The requisite means 
themselves and their interaction must also be comprehended chronologically. Applicant 
clearly has failed to demonstrate the date(s) of conception life cycle by leavinR the date 
column blank from the version control history of different phases of evolving invention 
document. Some examples are, (1) Patent Idea Detail Document No. 41685. (2) CNS/AD 
Client document: un-numbered second page after title page, and Page 9. 
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(3) IOS CNS Event... Specification: Page ii. (4) IOS CNS/AD Client document: Page 14, 
and Page. 15. 

Therefore, applicants clearly have failed to explicitly identify specific claim 
limitations, which would define a patentable distinction over prior arts. The examiner 
asserts that cited prior arts do teach or suggest the subject matter as broadly recited in 
independent claims 1, 11, 13, 15-16, 21-22, 25 and 26. Dependent claims 2-10, 12, 14, 
17-20, and 23-24 are also rejected at least by virtue of their dependency on independent 
claims and by other reason set forth in previous office action (Paper No. 8). Accordingly, 
rejections for claims 1-26 are respectfully maintained. 



Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent granted 
on an application for patent by another filed in the United States before the invention by the applicant 
for patent, except that an international application filed under the treaty defined in section 351(a) shall 
have the effects for purposes of this subsection of an application filed in the United States only if the 
international application designated the United States and was published under Article 21(2) of such 
treaty in the English language. 

5. Claims 1-5, 7-10, and 15-17, and 20-24 are rejected under 35 U.S.C. 102(e) as 



being anticipated by Harrison et al. U.S. Patent No. 6,330,560 ('Harrison' hereinafter). 
6. With respect to claim 1 , Harrison teaqh a directory-enabled network element (see 
abstract; col. 1, lines 19-37; col. 3, lines 20-25, 59-61; Fig. 1). 
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7. Claim 2 rejected as above rejecting claim 1 5 further comprising a directory 
enabling element installed in an executed by the network element, and configured to 
query, access, and update directory information that is managed by a directory service of 
a network that includes the network element (see col. 1, lines 19-25; col. 4, lines 16-36). 

8. Claim 3 rejected as above in rejecting claim 1, further comprising: 

a directory enabling element installed in and executed by the network element, 
and configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36) 

an application programming interface coupled to the directory enabling element 
and configured to receive directory services requests from application programs and 
provide the directory services requests to the directory enabling element (see col. 1, lines 
47-65). 

9. Claim 4 rejected as above in rejecting claim 1, comprising: 

a directory enabling element installed in and executed by the network element, 
and configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36); 

an application programming interface coupled to the directory enabling element 
and configured to receive directory services requests from application programs and 
provide the directory services requests to the directory enabling element (see col. 1, lines 
47-65). 
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a locator service coupled to the directory enabling element and accessible using 
the application programming interface and configured to locate servers that provide the 
directory services in the network (see col. 4, lines 15-36). 

10. Claim 5 rejected as above in rejecting claim 1, further comprising: 

a directory enabling element installed in and executed by the network element, and 
configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36); 

a bind service in the directory enabling element and coupled to a security protocol 
and configured to bind an external application program to the security protocol (see col. 
2, lines 38-53; col 4, lines 15-36). 

1 1 . Claim 7 rejected as above in rejecting claim 1, further comprising: 

a directory enabling element installed in and executed by the network element, 
and configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36); 

a locator service coupled to the directory enabling element and configured to 
locate servers that provide the directory services in the network (see col. 4, lines 15-36); 

an event service coupled to the directory enabling element and configured to 
receive registration of an event and an associated responsive action from an application 
program, notify the application program when the event occurs, and execute the 
associated responsive action in response thereto (see col. 1, lines 47-65). 

12. Claim 8 rejected as above in rejecting claim 1 , further comprising: 
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a directory enabling element installed in and executed by the network element, 
and configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36); 

an application programming interface coupled to the directory enabling element 
and configured to receive directory services requests from application programs and 
provide the directory services requests to the directory enabling element (see col. 1, lines 
47-65). 

a locator service coupled to the directory enabling element and configured to 
locate servers that provide the directory services in the network (see col. 4, lines 15-36); 

an event service coupled to the directory enabling element and configured to 
receive registration of an event and an associated responsive action from an application 
program, notify the application program when the event occurs, and execute the 
associated responsive action in response thereto (see col. 1, lines 47-63). 
13. Claim 9 rejected as above in rejecting claim 1, further comprising: 

a directory enabling element installed in and executed by the network element, 
and configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36); 

a locator service coupled to the directory enabling element and configured to 
locate servers that provide the directory services in the network (see col. 4, lines 15-36); 

a group policy interface coupled to the directory enabling element and configured 
to receive and update the directory service with one or more definitions of directory 
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services policies that apply to groups of network devices in the network (see col. 2, lines 
23-45). 

14. Claim 10 rejected as above in rejecting claim 1, further comprising: 

a directory enabling element installed in and executed by the network element, 
and configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the network element (see col. 1, lines 19-25; 
col. 4, lines 16-36); 

a bind service in the directory enabling element and coupled to an security 
protocol and configured to bind an external application program to the security protocol 
(see col. 2, lines 38-53; col. 4, lines 15-36) 

an event service coupled to the directory enabling element and accessible using 
the application programming interface and configured to receive registration of an event 
and an associated responsive action from an application program, notify the application 
program when the event occurs, and execute the associated responsive action in response 
thereto (see col. 1, lines 47-65). 

15. With respect to claim 1 5, Harrison teach a method of using a directory-enabled 
network element to query, access, or update directory information of a directory service 
of a network that includes the directory-enabled network element, wherein the directory- 
enabled network element comprises a directory enabling element installed in and 
executed by the network element, and configured to query, access, and update directory 
information that is managed by a directory service of a network that includes the network 
element (see abstract; col. 1, lines 19-25; col. 4, lines 16-36); the method comprising the 
steps of: 
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binding the application program to the security protocol (see col. 4, lines 16-36); 

creating an event and an associated responsive action that are associated with the 
application program (see col. 1, lines 47-65); 

in response to occurrence of the event, executing the responsive action, obtaining 
policy information from the directory service, and converting the policy information into 
one or more commands that are executable by the directory-enabled network element (see 
col. 2, lines 23-45). 

1 6. With respect to claim 1 6, Harrison teach a computer-readable medium carrying 
one or more sequences of instructions for using a directory-enabled network element to 
query, access, or update directory information of a directory service of a network that 
includes the directory-enabled network element (see col. 1, lines 19-25; col. 4, lines 16- 
36), wherein execution of the one or more sequences of instructions by one or more 
processors causes the one or more processors to perform the steps of: 

creating and storing a directory enabling element installed in and executed by the 
network element, and configured to query, access, and update directory information that 
is managed by a directory service of a network that includes the network element (see 
col. 1, lines 19-25; col. 4, lines 16-36). 

binding the application program to the security protocol (see col. 4,lines 16-36); 

creating an even and an associated responsive action that are associated with the 
application program (see col. 1, lines 47-65); 

in response to occurrence of the event, executing the responsive action, obtaining 
policy information from the directory service, and converting the policy information into 
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one or more commands that are executable by the directory enabled network element (see 
col. 4,lines 16-46). 

17. Claim 17 rejected as above in rejecting claim 16, further performing the steps of: 
locating a nearest directory server and binding the application program to the 

nearest directory server that is located (see col. 1, lines 47-63); 

locating a nearest event server and binding the application program to the nearest 
event server that is located (see col. 4, lines 15-36). 

18. Claim 20 rejected as above in rejecting claim 16, further wherein execution of the 
one or more sequences of instructions by one or more processors causes the one or more 
processors to perform the further steps of establishing an application programming 
interface coupled to the directory enabling element and configured to receive directory 
services requests from application programs and provide the directory services requests 
to the one or more processors (see col. 1, lines 47-67 to col. 2, lines 1-14). 

19. With respect to claim 21, a Harrison teach a directory services-enabled network 
element (see col.l, lines 19-37; col. 3, lines 20-25, 59-61) 

20. With respect to claim 22, a Harrison teach a system comprising a network element 
enabled to automatically interface with directory services (see col. 1, lines 47-65) 

21. Claim 23 rejected as above in rejecting claim 22, wherein the network element 
obtains policy information form the directory services and updates the directory service 
(see col. 2, lines 23-45) 

22. Claim 24 rejected as above in rejecting claim 22, wherein the network element 
includes a protocol agent for interfacing with directory services (see col. 3, lines 20-53). 
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Claim Rejections - 35 USC §103 

23. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

24. Claim 6 is rejected under 35 U.S.C. 103(a) as being unpatentable over Harrison et 
al. U.S. Patent No. 6,33,560 ('Harrison 5 hereinafter) in view of Day, II et al. U.S. Patent 
No. 5,968,116 ('Day, II 5 hereinafter). 

25. Harrison teach claim 6 rejected as above in rejecting claim 2. 

Harrison does not explicitly disclose a Unicode translation service configured to 
query, access, and update directory information that is encoded in a Unicode international 
character format. 

Day, II teach a Unicode translation service configured to query, access, and 
update directory information that is encoded in a Unicode international character format 
(see col. 6, lines 13-31). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Day, II within the system of Harrison 
because both references are directed to a directory-enabled network element, and because 
the implementation of the Unicode translation service of Day, II in Bernhard would 
allow for the data within the directory to be effectively transported through the network 
without corruption, further improving the reliability of the directory information that is 
encoded in a Unicode international character format. 
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26. Claims 1 1-14 and 25-26 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Harrison et al. U.S. Patent No. 6,33,560 ('Harrison' hereinafter) in 
view of Baum et al. U.S. Patent No. 6,400,707 ( 6 Baum' hereinafter). 

27. With respect to claim 1 1 , Harrison teach a directory-enabled packet router (see 
col. 1, lines 19-25, 47-65; col. 3, lines 20-25, 59-61). 

Harrison does not explicitly disclose a packet-switched network. 
Baum disclose a packet-switched network (see col. 3, lines 48-64) 
It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Baum within the system of Harrison 
because both references are directed to a directory-enabled network and the combination 
of both references would enable packets sent from the directory to be divided into packets 
before they are sent , and once all the packets forming the message arrive at the 
destination to recompile into the original message, further withstanding delays in 
transmission and increasing the efficiency in which the packets of data are received at the 
destination. 

28. Claim 12 rejected as above in rejecting claim 11, further comprising: 

a directory enabling element installed in and executed by the router, and 
configured to query, access, and update directory information that is managed by a 
directory service of a network that include the router (see col. 1, lines 19-25; col. 4, lines 
16-36); 

a bind service in the directory enabling element and coupled to a security protocol 
and configured to bind an application program to the security protocol (see col. 2, lines 
38-53; col. 4, lines 15-36); 
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an event service coupled to the directory enabling element and accessible using 
the application programming interface and configured to receive registration of an event 
and an associated responsive action from an application program, notify the application 
program when the even occurs, and execute the associated responsive action in response 
thereto (see col. 1, lines 47-65). 

29. With respect to claim 13, Harrison teach a directory-enabled network data switch 
(see col. 1, lines 19-37; col. 3, lines 20-25, 59-61). 

Harrison does not explicitly disclose a packet-switched network. 
Baum disclose a packet-switched network (see col. 3, lines 48-64) 
It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Baum within the system of Harrison 
because both references are directed to a directory-enabled network and the combination 
of both references would enable packets sent from the directory to be divided into packets 
before they are sent , and once all the packets forming the message arrive at the 
destination to recompile into the original message, further withstanding delays in 
transmission and increasing the efficiency in which the packets of data are received at the 
destination. 

30. With respect to claim 14 rejected as above in rejecting claim 13, further 
comprising: 

a directory enabling element installed in and executed by the switch, and 
configured to query, access, and update directory information that is managed by a 
directory service of a network that includes the switch (see col. 3, lines 48-67 to col. 4, 
lines 1-14); 
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a bind service in the directory enabling element and coupled to a security protocol 
and configured to bind an application program to the security protocol (see col. 3, lines 
48-67 to col. 4, lines 1-63; col. 6, lines 66-67 to col. 7 5 lines 1-24); 

an event service coupled to the directory enabling element and accessible using 
the application programming interface and configured to receive registration of an event 
and an associated responsive action from an application program, notify the application 
program when the event occurs, and execute the associated responsive action in response 
thereto (see col. 7, lines 25-64). 

3 1 . With respect to claim 25, Harrison teach a directory-enabled packet router (see 
col. 1, lines 19-25, 47-65; col. 3, lines 20-25, 59-61). 

Harrison does not explicitly disclose a packet-switched network. 
Baum disclose a packet-switched network (see col. 3, lines 48-64) 
It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Baum within the system of Harrison 
because both references are directed to a directory-enabled network and the combination 
of both references would enable packets sent from the directory to be divided into packets 
before they are sent , and once all the packets forming the message arrive at the 
destination to recompile into the original message, further withstanding delays in 
transmission and increasing the efficiency in which the packets of data are received at the 
destination. 

32. With respect to claim 26, Harrison teach a directory-enabled network data switch 
(see col. 1, lines 19-37; col. 3, lines 20-25, 59-61). 

Harrison does not explicitly disclose a packet-switched network. 
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Baum disclose a packet-switched network (see col. 3, lines 48-64) 
It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Baum within the system of Harrison 
because both references are directed to a directory-enabled network and the combination 
of both references would enable packets sent from the directory to be divided into packets 
before they are sent , and once all the packets forming the message arrive at the 
destination to recompile into the original message, further withstanding delays in 
transmission and increasing the efficiency in which the packets of data are received at the 
destination. 

33. Claims 18-19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Harrison et al. U.S. Patent No. 6,33,560 ('Harrison' hereinafter) in view of Nessett et al. 
U.S. Patent No. 5,968,176 ('Nessett 5 hereinafter). 

34. Harrison teach claim 1 8 rejected as above in rejecting claim 16. 

Harrison does not explicitly disclose a virtual private network is created between 
the router and another network device. 

Nessett teach translating the policy information into one or more values that are 
ready to apply to a router, whereby a virtual private network is created between the router 
and another network device (see col. 14, lines 31-47; col. 15, lines 6-67). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Nessett within the system of Bernhard to 
arrive at the invention as claimed because both references are directed to a computer- 
readable medium, and because the implementation of virtual private network would 
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increase the level of protection of the packets that are moved between the source and 
destination, further preserving the integrity of the data within the directory-enabled 
network element. 

35. Harrison teach claim 19 rejected as above in rejecting claim 16. 

Harrison does not explicitly disclose a set of internal data structures of a router 
and a dynamic IP SEC configuration. 

Nessett teach translating the policy information into one or more values that are 
ready to apply to a set of internal data structures of a router, by calling one or more 
internal NOS API functions, whereby a dynamic IPSEC configuration is created that 
connects the router and at least one other network device (see col. 10, lines 24-59; col. 
13, lines 51-67 to col. 14, lines 19-30). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of Nessett within the system of Bernhard to 
arrive at the invention as claimed because both references are directed to a computer- 
readable medium, and because the implementation of IPSEC configuration would 
increase the level of protection of the communication that occurs between the router and 
one other network device, effectively ensuring the secure packet exchanges at the IP 
layer, and further improving the security of the communication interface of the combined 
system. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of 
time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SEX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Syed Zia whose telephone number is 703-305-3881. The 
examiner can normally be reached on Monday - Friday 9:00 AM to 5:00 PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 703-305-9648. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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